46aeb9843f
When running in check mode, some prechecks previously failed because they use the command module which is silently not run in check mode. Other prechecks were not running correctly in check mode due to e.g. looking for a string in empty command output or not querying which containers are running. This change fixes these issues. Closes-Bug: #2002657 Change-Id: I5219cb42c48d5444943a2d48106dc338aa08fa7c
61 lines
1.9 KiB
YAML
61 lines
1.9 KiB
YAML
---
|
|
- import_role:
|
|
name: service-precheck
|
|
vars:
|
|
service_precheck_services: "{{ keystone_services }}"
|
|
service_name: "{{ project_name }}"
|
|
|
|
- name: Get container facts
|
|
become: true
|
|
kolla_container_facts:
|
|
container_engine: "{{ kolla_container_engine }}"
|
|
name:
|
|
- keystone
|
|
- keystone_ssh
|
|
check_mode: false
|
|
register: container_facts
|
|
|
|
- name: Checking free port for Keystone Public
|
|
wait_for:
|
|
host: "{{ api_interface_address }}"
|
|
port: "{{ keystone_public_listen_port }}"
|
|
connect_timeout: 1
|
|
timeout: 1
|
|
state: stopped
|
|
when:
|
|
- container_facts['keystone'] is not defined
|
|
- inventory_hostname in groups['keystone']
|
|
|
|
- name: Checking free port for Keystone SSH
|
|
vars:
|
|
keystone_ssh: "{{ keystone_services['keystone-ssh'] }}"
|
|
wait_for:
|
|
host: "{{ api_interface_address }}"
|
|
port: "{{ keystone_ssh_port }}"
|
|
connect_timeout: 1
|
|
timeout: 1
|
|
state: stopped
|
|
when:
|
|
- container_facts['keystone_ssh'] is not defined
|
|
- keystone_ssh.enabled | bool
|
|
- inventory_hostname in groups['keystone']
|
|
|
|
- name: Checking fernet_token_expiry
|
|
run_once: true
|
|
assert:
|
|
that:
|
|
- fernet_token_expiry is number
|
|
# Check that it is not a floating point number
|
|
- fernet_token_expiry | int == fernet_token_expiry
|
|
- fernet_token_expiry >= 0
|
|
# NOTE(wszumski): fernet_rotate_cron_generator.py doesn't support a span
|
|
# greater than a week.
|
|
- fernet_token_expiry <= 604800
|
|
msg: >-
|
|
fernet_token_expiry must be an integer up to and including 604800. You can
|
|
set this in `globals.yml`. The value represents the time period, in
|
|
seconds, at which to rotate the fernet keys. Suggested values are: 60,
|
|
120, 240, 480, 720, 1440, 3600, 7200, 10800, 14400, 21600, 43200, 60480,
|
|
120960, 151200, 201600, 302400, 604800. These values ensure an evenly-spaced
|
|
run schedule as they divide 7 days without remainder.
|